307 matches found
[SECURITY] [DSA 1789-1] New php5 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1789-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst May 04, 2009 http://www.debian.org/security/faq -...
Ubuntu: Security Advisory (USN-761-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu USN-761-1 (php5)
The remote host is missing an update to php5 announced via advisory USN-761-1. OpenVAS Vulnerability Test $Id: ubuntu7611.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7611.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-761-1 php5 Authors: Thomas Reinke...
Mandriva Linux Security Advisory : php (MDVSA-2009:090)
A vulnerability has been found and corrected in PHP : The JSONparser function ext/json/JSONparser.c in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service segmentation fault via a malformed string to the jsondecode API function CVE-2009-1271. The updated packages have been...
Mandrake Security Advisory MDVSA-2009:090 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:090. OpenVAS Vulnerability Test $Id: mdksa2009090.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:090 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
RedHat Security Advisory RHSA-2009:0350
The remote host is missing updates announced in advisory RHSA-2009:0350. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A heap-based buffer overflow flaw was found in PHP SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted...
Mandrake Security Advisory MDVSA-2009:090 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:090. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...
[ MDVSA-2009:090 ] php
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:090 http://www.mandriva.com/security/ Package : php Date : April 10, 2009 Affected: 2008.1, 2009.0 Problem Description: A vulnerability has been found and corrected in PHP: The JSONparser function...
CVE-2009-1271
PHP 5.2.x before 5.2.9 is affected by a denial-of-service vulnerability in the JSON_parser.c json_decode path. A remote attacker can trigger a segmentation fault by sending a malformed string to json_decode, as described in CVE-2009-1271. Affected product lines are PHP 5.2.x up to 5.2.8; upgrade ...
CVE-2008-1271
CVE-2008-1271 is rejected; reference CVE-2008-1218 instead.
Debian: Security Advisory (DSA-1271-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 386-1 (libmailtools-perl)
The remote host is missing an update to libmailtools-perl announced via advisory DSA 386-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2007-1271
CVE-2007-1271 involves a buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 that may allow an attacker to gain privileges or cause a denial of service (application crash). The affected product is VMware ESX Server; the underlying cause is a buffer overflow. The vectors are not specified in the ...
CVE-2006-1271
CVE-2006-1271 describes a SQL injection vulnerability in the OxyNews package, specifically in index.php, where the oxynews_comment_id parameter can be exploited by remote attackers to execute arbitrary SQL commands. The vulnerability arises from improper handling of user-supplied input in the aff...
CVE-2003-1271
Technical details about CVE-2003-1271 are not publicly available in the provided documents; no explicit affected products, versions, or remediation are shown. Monitor for updates.
CVE-2004-1271
The CVE-2004-1271 issue affects dxfscope 0.2 and is caused by a buffer overflow in the dxfin function in d.c. A crafted DXF file can lead to remote code execution. The connected documents do not provide remediation steps or explicit exploitation status; no MITRE/ATT&CK details are stated. Exploit...
Debian DSA-386-1 : libmailtools-perl - input validation bug
The SuSE security team discovered during an audit a bug in Mail::Mailer, a Perl module used for sending email, whereby potentially untrusted input is passed to a program such as mailx, which may interpret certain escape sequences as commands to be executed. This bug has been fixed by removing...
CVE-2002-1271
The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx...